yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] wauwter:
no CMW file to chose in RECOVERY step 8

Dear all,

I am trying to follow the tutorial, but run into a problem in step 8.

The instruction says to "Click on RECOVERY and we choose the file CWM in the same folder which was created on the 7th step." However, for me there is not a file named CMW present in this folder. I do see some error messages, but cannot figure out what is going wrong. Hope someone can help me, see the MTK Droid Root & Tools v2.4.8 below.

Hope somebody can help!

Thanks!

ATTENTION! Fake Hardware in kernel or firmware doesn't correspond to phone!

--- The preservation folder on the computer: B:\MtkDroidTools\backups\GT-I9500_130729_ForFlashtoolFromReadBack_131016-040350\

--- scatter is write to the file:

B:\MtkDroidTools\backups\GT-I9500_130729_ForFlashtoolFromReadBack_131016-040350\MT6589_Android_scatter_emmc.txtcopying is complete

-- preloader.bin ...it is copied ... cut OK

-- MBR ...it is copied

-- EBR1 ...it is copied

-- pmt ...it is copied

- PMT tables found

- PMT tables OK, 22 blocks found

-- pro_info ...it is copied

-- nvram.bin ...it is copied

-- protect_f ...it is copied

-- protect_s ...it is copied

-- seccfg ...it is copied

-- uboot.bin ...it is copied

-- boot.img ...it is copied

--- ERROR :Boot ungzip: bf.gz: Bad address

-- recovery.img ...it is copied

-- secro.img ...it is copied

-- misc ...it is copied

-- logo.bin ...it is copied

-- EBR2 ...it is copied

-- expdb ...it is copied

-- system.img ...it is copied

--- task is complete ---

--- scatter is write to the file:

B:\Flashing HDC Legend\MT6589_Android_scatter_emmc.txt

- PMT tables found

- PMT tables OK, 22 blocks found

ATTENTION! Fake Hardware in kernel or firmware doesn't correspond to phone!
[Android Software/Hacking General [Developers Only]] rua1:
@ tsitadim

???
[Android Software/Hacking General [Developers Only]] tsitadim:
I have the correct version of ADB drivers as yours but doesn't recognize my phone from my computer.
[Android Software/Hacking General [Developers Only]] rua1:
oh ... Phone is switched on at this time? It seems that it isn't switched on. Is present MediaTek USB Port (COM8).
[Android Software/Hacking General [Developers Only]] tsitadim:
You are right. I thought that it would be worked with phone switched off. My phone doesn't open. This is the problem.Sorry for this mistake.
[Android Software/Hacking General [Developers Only]] rua1:
Changes in versions 2.4.0 and 2.4.1:

after receiving root shell now CWM becomes automatically without file existence from similar phone

now patched boot for kernel v3.4.x becomes

small corrections for MT8589 support

error of unpacking of some boot.img is corrected
[Android Software/Hacking General [Developers Only]] nerbiyoso:
hello! when using the backup feature, is there a way to disable the creation of clockworkmod backup created in the sdcard? since i only want to create a sptool flashable backup using mtk droid/root tool, i always just delete the clockworkmod backup created. thanks
[Android Software/Hacking General [Developers Only]] bgcngm:
Good to see support for MT6589. :highfive:

By the way, you forgot to update the download link on the OP. It still points to an old release.
[Android Software/Hacking General [Developers Only]] rua1:
oops ... wrong link pasted from other forum :eek:

changes are minimum, program wanted to see dsp_bl, and it didn't appear ;)

To make backup process by more user friendly is in my todo list, I will make when there will be free time on it.
[Android Software/Hacking General [Developers Only]] tsitadim:
New problem now. I am trying to backup and root my rom and on step 8 I have a problem. When I load scatter file I have this message

Then I have this

Also I can't root
[Android Software/Hacking General [Developers Only]] tsitadim:
can amybody help me?
[Android Software/Hacking General [Developers Only]] kaddyc26:
:confused:this serves to rooting one MTK6589? is possible the rooting in the

GoPhone G9589: http://www.aliexpress.com/item/Hots...lphone-Android4-1-1-2GH-5-5-HD/774641858.html:confused:
[Android Software/Hacking General [Developers Only]] pratikmore:
Whitch sp flash tool is useful for mt6515?
[Android Software/Hacking General [Developers Only]] bgcngm:
SP Flash Tool v3.1206.01 or higher. Newer versions are backward compatible.
[Android Software/Hacking General [Developers Only]] pratikmore:
How to root this mt6515?droid tool not recognised my phone due to drivers.any other method for root mt6515,i already tried other methods but no luck.
[Android Software/Hacking General [Developers Only]] alexaglob:
Hello, if you have a scatter file from the original rom, or the last rom you flashed in the phone, create a folder, put inside that scatter file and the patched recovery (rename it to recovery.img), then do the process again by selecting the scatter file from this folder.

BTW i want to thank rua1, first for this method, i rooted yesterday my Ceasar A9600 successfully. The easiest way to create a cwm and from that time the hands are free. :good:

For a second reason, a post of rua1 at the russian site helped me to unbrick my Tinji 9300, that was completely dead, by following his concept of finding the test point on the Mediatek based phone boards. :good:

And as rua1 mentions in red, never flash the preloader, specialy if the rom is not for the specific phone, lessons learned.:o
[Android Software/Hacking General [Developers Only]] lopestom:
I have other device MT6516 and root it with SuperOneClick 1.7. Get this easily.
[Android Software/Hacking General [Developers Only]] tsitadim:
moved to

http://xdaforums.com/showthread.php?p=39276060#post39276060
[Android Software/Hacking General [Developers Only]] cyberangel22k:
any help? when trying to process ROM_ file this is whats happening...
[Android Software/Hacking General [Developers Only]] rua1:
make CWM "To choose the boot.img file" a and Download it using SPFT

what size ROM file?
[Android Software/Hacking General [Developers Only]] tsitadim:
Is there any way to fix bad blocks in bootloader? My device has a lot of problems.
[Android Software/Hacking General [Developers Only]] lopestom:
See this: http://xdaforums.com/showpost.php?p=43977422&postcount=353

If only the IMEI you can also try applications (depending on your MT65??). For example: MauiMETA_3G.exe - IMEI.exe - MTK 65XX.apk - IMEI SN.exe - SN_Write_tool.exe - mobileuncletools.apk
[Android Software/Hacking General [Developers Only]] csns:
The point is I have MT8389.

But I'll take a look and see if those apps help.

Thank you.
[Android Software/Hacking General [Developers Only]] Alex1948:
If you did the right , in B:\MtkDroidTools\backups\GT-I9500_130729_ForFlashtoolFromReadBack_131016-040350\ folder , these files must be :

see post 556 , image nr.3(A5 DUO is my phone) , in which :

A5_Duo_130806__recovery_131009-142022 - CWM for Flash (A5 DUO is my phone)

factory_NONmodified_recovery - original recovery.img your phone
[Android Software/Hacking General [Developers Only]] Alex1948:
See block adress - at rua1 in post - see image 1

and my scatter file , block adress - see image 2 - CACHE - 0x3c9c0000
[Android Software/Hacking General [Developers Only]] wauwter:
Dear all,

As you can see in the screenshot, I have all the files which you also have in the picture, except for the CMV recovery. I do see the "-- ERROR :Boot ungzip: bf.gz: Bad address" error during the MTK Droid Tools process, exactly where in the tutorial the CMV recovery image is formed. Also I have many more lines in the file, maybe this is a problem as well?

Please let me know if you have any further ideas!
[Android Software/Hacking General [Developers Only]] Alex1948:
CWM recovery

I do not understand what you want to do with your phone !!!???

MTKdroid is made for these :

- Backup for SP Flash Tools

- Root shell and root(if your not at the root phone)

-CWM recovery by rua1 - version 5

and more......

If you want to install CWM Recovery , see post 417 - oscarblue48 = HOW to install CWM most rooted MTK devices
[Android Software/Hacking General [Developers Only]] wauwter:
I was in the understanding I had to go through this procedure, before I could flash new ROMs through SP Flash Tools?

Apparently this is not the case?
[Android Software/Hacking General [Developers Only]] nilsi1987:
Im not sure I understand what you mean? I know that I shall look in the scatter file and paste the that into SP flash tool, but does my cellphone got to little space for CWM? That's how I read rua1's text, in the first picture.
[Android Software/Hacking General [Developers Only]] elvis56:
Fantastic tool

Thanks for this great tool. I was able to backup my rom and afterwards install CWM on my i-mobile IQ9a (thailand brand with MT6589). Now all that's missing on my phone is USB host/USB OTG but I think that could be fixed somehow.
[Android Software/Hacking General [Developers Only]] kthz:
Hello,

is MT6572 supported in MTKDroidtools ? Option to create a scatter file is greyed despite i see all blocks map (using 2.4.8 off course).

Thanks for this great tool :)
[Android Software/Hacking General [Developers Only]] oscarblue48:
Please see post #484
[Android Software/Hacking General [Developers Only]] kthz:
Nice, works as simply as that :)
[Android Software/Hacking General [Developers Only]] csns:
OK, I tried mobileuncle - my MT8389 is not supported.

I tried Maui META but the software does not recognize my tablet although it seems to enter the "meta mode".

SN Write tool - cannot find modem database files that would support the MT8389.

I read somewhere (on another forum) that this MTK chip does not allow for IMEI repair - can somebody confirm this?

I somehow managed to flash the NVRAM part with SP Flash tools but the IMEI is still corrupt. Also, doing anything in the engineering mode does not work.

Any ideas are much appreciated.

Thank you.
[Android Software/Hacking General [Developers Only]] elvis56:
And again, great tool! Also working with I mobile IQ 6.1.
[Android Software/Hacking General [Developers Only]] m0han:
Android/Exploit.Lotoor.DH trojan?

When the MTK Droid Tools v2.4.8.exe file (size 7,492,128 bytes and MD5 Checksum bd42c7cf9dca79e70caf3ef1517f6815) is downloaded/extracted, ESET Smart Security flags the file "zR" in "MtkDroidTools/files/" folder as a threat (Android/Exploit.Lotoor.DH trojan). Somebody please check and confirm whether this is indeed the right file. After cleaning by ESET, the size of the file is 7,491,400 bytes and MD5 Checksum is 3231e50a0074f9d68217dde0f72a7c74. Now, which one should be used? Thanks.
[Android Software/Hacking General [Developers Only]] zuz242:
I guess both assumptions are right:

1 The file / toolkit has funktions to exploit security holes in android systems. Hence Eset is right.

2 These functions are exactly what we need, as gaining root is not intended by the manufacturers.

So, everything is OK ;)
[Android Software/Hacking General [Developers Only]] Tyto:
Hello,

The "Create Scatter file" is not available :(
[Android Software/Hacking General [Developers Only]] Alex1948:
"Create Scatter file" is not available

The SOC MT6572 is not yet supported by the tool, but it is possible to make it work with your device by editing the MTKdroidTools.ini file you'll find it in the mtkdroid tools folder, if you right click on the file then click on Edit. look for the line MTKsocs = ^MT65(16|73|75|77|89) and change 73 to 72 then save and close, hopefully then it will create your scatter file.

He wrote and [MENTION=5262551]oscarblue48[/MENTION]

---------- Post added at 05:34 AM ---------- Previous post was at 05:33 AM ----------
[Android Software/Hacking General [Developers Only]] rua1:
please attach boot.img file
[Android Software/Hacking General [Developers Only]] rua1:
v2.4.8b

v2.4.8b --> http://yadi.sk/d/4H-zKhdJBSZHn​

Exe file only for replace original file in v2.4.8 folder. For testing on MT6582. МТ6572 too is included in ini.
[Android Software/Hacking General [Developers Only]] Tyto:
What needs to be done?
[Android Software/Hacking General [Developers Only]] oscarblue48:
Ae you using a recent build of mtk droid tools, as early versions did not support mt6589
[Android Software/Hacking General [Developers Only]] rua1:
look upward ;) and try v2.4.8b
[Android Software/Hacking General [Developers Only]] Tyto:
Yesterday i rooted a S9500 mtk6589 phone equal to mine with my MTK droid tools version. Mine i can't it gives error, it is a S9500 with a MTK6582 processor. This is what is shown on mtk droid tools
[Android Software/Hacking General [Developers Only]] Tyto:
Will try that tonight. Thanks, i will give some feedback asap!
[Android Software/Hacking General [Developers Only]] Tyto:
Thanks, option "Create scatter file" is now available ;) but i'm still unable to root the phone! The drivers are correctly installed, the pre-loader are installed, no chance!

I have to use this process where in this thread.

Can i use the rom installed in my phone for this process or i need to download a new one?
[Android Software/Hacking General [Developers Only]] Alex1948:
Multumesc

Tks,Tks.Tks

And adb folder , files folder , English.lang , copy to folder where you have extracted the archive
[Android Software/Hacking General [Developers Only]] Tyto:
Hello,

I'm having touble with this step.

6. Read Back ROM_

Click on Read Back button and connect the switched-off phone to PC. Here the options depending on a concrete phone are possible. Maybe it is necessary to press at the same time with connect of a cable the camera or volume buttons. Experiment and study work with FlashTool in threads with similar phones! On some MT6573 models, for example on B63, it can't be executed with any combinations and only testpoint need!

When I click Read Back the bellow message appears:

I can't read back my phone. It's the s9500 model with a MTK6582 CPU.

I already try to connect him using the volume buttons (remove batery-> connect to PC with vol up ressed ) and no sucess

TAKE THE BATTERY ,SD ,SIM OUT OF THE PHONE

2>HOLDING VOLUME+ CONNECT IT TO PC VIA USB(ONCE YOU HEAR A SOUND FROM PC YOU CAN RELEASE VOLUME+)

The preloader and the usb drivers are installed

I can't read back the phone :(

Please find attached files

help?
[Android Software/Hacking General [Developers Only]] syserr:
csns,

Your name is familiar... I'm finally getting fired up about the old MT6575 Lenovo A2107A (-F, -H). Thanks for your contrib way back in those threads. Anyway, I may be able to help. I've been picking away at how the NVRAM block and /data/nvram interact. The reason is many people can't get their IMEI to work even after repaired.

What I've found is if you boot into CWM with ADB support you can clear the NVRAM block and move the /data/nvram out of the way. (at least on my tablet) Then the system as it first boots replaces that calibration information. If I remember right though, still the IMEI is "unknown." But if your new SoC does not allow IMEI repair, it might be in a read only area that a cleared system would fetch.

You can try this to clear:

Note: you can do the dd part with SPFT of course with "Read back" and "Write" tabs.

Another Option:

If you have a good backup of either /data/nvram or your NVRAM partition block, I may be able to help force it to sync the good of the two to the bad of the two.

And another:

su

echo 'AT +EGMR=1,7,"IMEI_1"'> /dev/pttycmd1

(where IMEI_1 is replaced with your IMEI)

http://chinagizmos.blogspot.com/2012/10/imei-problems-backup-restore-no-service.html
[Android Software/Hacking General [Developers Only]] zenesis:
can we port mt6589T roms to a mt6589?
[Android Software/Hacking General [Developers Only]] oscarblue48:
[MENTION=1391690]Tyto[/MENTION] the version of SPflashtool you are using (3.1312) does not support your mt6582 device, you can download the latest SPflashtool here http://www.4shared.com/archive/zHXgDV29/SP_Flash_Tool_v313280183.html
[Android Software/Hacking General [Developers Only]] Tyto:
Hello,

That's another problem i don't now if my phone is MTK6582 or MTK6589.

In Antutu Benchmark when connect to wifi it said is MTK6589 but in MTK Droid Tools it appears MTK6582! What is the correct?
[Android Software/Hacking General [Developers Only]] oscarblue48:
I think you probably have an mt6582 device, that chip has only been available for a few months, which is why a lot of the tools etc only support it in the latest versions, you could try the app, CPU Identifier from the play store, that correctly identifies my mt6589t, whereas antutu doesn't.
[Android Software/Hacking General [Developers Only]] Tyto:
So the 6582 it's better or worst than the 6589?
[Android Software/Hacking General [Developers Only]] Alex1948:
Chipset

CPU-Z you say? - see image.

Install CPU-Z.apk , Google Play.

Sorry , for Tyto reply.
[Android Software/Hacking General [Developers Only]] Typhus_:
Hello!

I'm trying to find a CWM Recovery for my bq Aquaris 3.5 (MT6572). Still haven't found one, so I've tried to build one using this tool.

The problem is that my phone is not recognized by the tool at all, when it should be.

This doesn't make any sense.

The ADB driver is correctly installed. I've tried with the ones provided on the official bq page (they are the MediaTek ones) and wiht the generic ones provided on PdaNet. None of them worked.

I'm able to use SP Flash Tool to flash a recovery, but I'm unable to find one that works on my model, that's why I've tried this

Can anyone help me, please?

Thanks in advance.

----EDIT----

SOLVED!!!

Changed USB settings to MTP.

Opened ADB terminal

adb wait-for-device

Disconnect USB cable

Recconect USB cable

DONE!

Finally!
[Android Software/Hacking General [Developers Only]] Alex1948:
MTKdroid Tool
[Android Software/Hacking General [Developers Only]] csns:
Well hello there.

You're quite right, I actually posted a few times regarding Lenovo but that chapter of my Android life is closed ;) In my opinion it was one of the worst tablets I've ever had in my hands.

Anyway, it looks that I managed to fix the problem. Since it took some time and effort I decided to share my observations. Here they are...

Subject: GoClever Aries 785 running Android 4.2.2 equipped with MT8389 SOC.

The problem.

After reflashing full ROM backup made with MTK Droid Tools 2.4.8 the 3G modem was ... out of order (in the engineering mode: radio was off, no IMEI). Also, since the radio was "off" it was impossible to write the correct IMEI.

BTW in order to get to engineering mode enter this on the phone keypad: *#*#3646633#*#*. Then: Connectivity -> CDS Information -> Radio Information -> Phone 1.

Solution:

The solution is simple as long as you have the initial (aka original) ROM dump of your device (or at least the same model). MTK Droid Tools works in a way that the initial ROM dump will not work when flashed back "as is" - you need to click "To prepare blocks for Flash Tool".

By doing the above a new folder is created on your PC - "!Files_to_FlashTool" - those are the files you should use to restore the ROM.

HOWEVER there are some manual actions that need to be done. In my case the "reworked" scatter file does not load two files: UBOOT and SECRO - those have to be selected by hand. Both of them are among the initial ROM dump files.

Once you flash this, there is one more flashing that has to be done - NVRAM. To flash NVRAM in SP Flash Tool you need to chose the initial scatter (not the "reworked") file and afterwards DESELECT everything except the USERDATA (which should point to "userdata_nvram_only.ext4.tar"). Also you need to pick PRELOADER from the "!Files_to_FlashTool" folder. Flash.

When the device boots you will see that it wants to do a full reset - there is no way around this. After second boot up, when you enter engineering mode you will see that the radio is "on". Then you can enter this AT command: AT+EGMR=1,7,"YOUR_IMEI_HERE". When the command gets accepted just restart the device. End.

I tested this for several time and it works.
[Android Software/Hacking General [Developers Only]] syserr:
csns, I somewhat agree. The A2107A has (I believe) 4 hardware profiles and is formatted at least 3 different ways from factory. This causes all sorts of problems for people like us! I'm doing one last push to get as much stuff figured out on it, as I realize there are quad MTK for just as cheap now.

Thanks for your note. There seems to be some voodoo in the middle, but it's definitely helpful to reference when trying to help users with similar problems.
[Android Software/Hacking General [Developers Only]] Alex1948:
UBOOT and SECRO

To me, MT6572, SP Flash Tool V3.1328.0.183(later version) not load UBOOT and SEC_RO from !Files_to_FlashTool , but SP Flash Tool V3.1320.0.174 load UBOOT(from LK file -->!Files_to_FlashTool) ,but still does not load SEC_RO.

SECRO.img exists in folder A5_Duo_130806_ForFlashtoolFromReadBack_131007-212823.

---------- Post added at 05:46 AM ---------- Previous post was at 05:25 AM ----------

Dear Mr [MENTION=5119815]rua1[/MENTION] or mr [MENTION=5262551]oscarblue48[/MENTION]

Why are different addresses - in firmware.info and MT6572_Android_scatter_emmc.txt.

Firmware.info

- from backup with MTKdroid

Preloader	0x0000000000600000 0x0000000000000000 2 /dev/misc-sd

mbr	0x0000000000080000 0x0000000000000000 2 /dev/block/mmcblk0

ebr1	0x0000000000080000 0x0000000000080000 2 /dev/block/mmcblk0p1

pro_info	0x0000000000300000 0x0000000000100000 2 /dev/block/mmcblk0

nvram	0x0000000000500000 0x0000000000400000 2 /dev/block/mmcblk0

protect_f	0x0000000000a00000 0x0000000000900000 2 /dev/block/mmcblk0p2

protect_s	0x0000000000a00000 0x0000000001300000 2 /dev/block/mmcblk0p3

seccfg	0x0000000000020000 0x0000000001d00000 2 /dev/block/mmcblk0

uboot	0x0000000000060000 0x0000000001d20000 2 /dev/block/mmcblk0

bootimg	0x0000000000600000 0x0000000001d80000 2 /dev/block/mmcblk0

recovery	0x0000000000600000 0x0000000002380000 2 /dev/block/mmcblk0

sec_ro	0x0000000000040000 0x0000000002980000 2 /dev/block/mmcblk0

misc	0x0000000000080000 0x00000000029c0000 2 /dev/block/mmcblk0

logo	0x0000000000300000 0x0000000002a40000 2 /dev/block/mmcblk0

ebr2	0x0000000000080000 0x0000000002d40000 2 /dev/block/mmcblk0

expdb	0x0000000000a00000 0x0000000002dc0000 2 /dev/block/mmcblk0

spdata	0x0000000000800000 0x00000000037c0000 2 /dev/block/mmcblk0p4

android	0x0000000038400000 0x0000000003fc0000 2 /dev/block/mmcblk0p5

cache	0x0000000017800000 0x000000003c3c0000 2 /dev/block/mmcblk0p6

usrdata	0x0000000074000000 0x0000000053bc0000 2 /dev/block/mmcblk0p7

fat	0x000000001fd60000 0x00000000c7bc0000 2 /dev/block/mmcblk0p8

bmtpool	0x0000000001500000 0x00000000ff9f00a8 2 /dev/block/mmcblk0

Block Info

- from Scatter file :

PRELOADER 0x0

{

}

MBR 0x600000

{

}

EBR1 0x680000

{

}

__NODL_PRO_INFO 0x700000

{

}

__NODL_NVRAM 0xa00000

{

}

__NODL_PROTECT_F 0xf00000

{

}

__NODL_PROTECT_S 0x1900000

{

}

__NODL_SECCFG 0x2300000

{

}

UBOOT 0x2320000

{

}

BOOTIMG 0x2380000

{

}

RECOVERY 0x2980000

{

}

SEC_RO 0x2f80000

{

}

__NODL_MISC 0x2fc0000

{

}

LOGO 0x3040000

{

}

EBR2 0x3340000

{

}

__NODL_EXPDB 0x33c0000

{

}

__NODL_SPDATA 0x3dc0000

{

}

ANDROID 0x45c0000

{

}

CACHE 0x3c9c0000

{

}

USRDATA 0x541c0000

{

}

__NODL_FAT 0xc81c0000

{

}

__NODL_BMTPOOL 0xffff00a8

{

}

Which are the best, right? I used to read back ROM_0 = CACHE 0x3c9c0000

In firmware.info is different, it shows. = cache	0x0000000017800000 0x000000003c3c0000 2 /dev/block/mmcblk0p6
[Android Software/Hacking General [Developers Only]] rua1:
@Alex1948 if emmc type flash then add preloader size (or preloader+dsp_bl on MT6575,77 dev) to start adress other blocks